FastStone multiple security vulnerabilities

Multiple vulnerabilities on ZIP files processing...

Vulnerable and completely outdated 3rd party ZIP code in FastStone image viewer

The FastStone image viewer http://www.faststone.org/ and most probably other FastStone products too contains a 3rd party ZipDll.dll 1.6.0.0 dated 2001-10-28. This DLL was originally written by Chris Vleghert and Eric W. Engler, based on InfoZIPs http://infozip.org code from 2000. It is but...

CVE-2008-5870

FastStone Image Viewer 3.6 allows user-assisted attackers to cause a denial of service application crash via a malformed BMP image with large width and height values, possibly a related issue to CVE-2007-1942...

Design/Logic Flaw

FastStone Image Viewer 3.6 allows user-assisted attackers to cause a denial of service application crash via a malformed BMP image with large width and height values, possibly a related issue to CVE-2007-1942...

CVE-2008-5870

FastStone Image Viewer 3.6 allows user-assisted attackers to cause a denial of service application crash via a malformed BMP image with large width and height values, possibly a related issue to CVE-2007-1942...

CVE-2008-5870

The CVE-2008-5870 entry concerns FastStone Image Viewer 3.6. It describes a vulnerability where a user-assisted attacker can cause an application crash (denial of service) by supplying a malformed BMP image with very large width and height values, with the issue noted as possibly related to CVE-2...

FastStone Image Viewer 3.6 (malformed bmp image) DoS Exploit

No description provided by source. Name : FastStone Image Viewer v3.6 malformed bmp image DoS Exploit Credit : suN8Hclf DaRk-CodeRs Group, [email protected] Download: : http://www.FastStone.org Greetz : Luigi Auriemma, 0in, cOndemned, e.wiZz!, Gynvael Coldwind, Katharsis, all from dark-coder...

faststone-dos.txt

Name : FastStone Image Viewer v3.6 malformed bmp image DoS Exploit Credit : suN8Hclf DaRk-CodeRs Group, [email protected] Download: : http://www.FastStone.org Greetz : Luigi Auriemma, 0in, cOndemned, e.wiZz!, Gynvael Coldwind, Katharsis, all from dark-coders and others; PoC:...

FastStone Image Viewer 3.6 (malformed bmp image) Crash Exploit

Exploit for unknown platform in category dos / poc ============================================================== FastStone Image Viewer 3.6 malformed bmp image Crash Exploit ============================================================== Name : FastStone Image Viewer v3.6 malformed bmp image DoS...

FastStone Image Viewer 3.6 (malformed bmp image) Crash Exploit

No description provided by source. Name : FastStone Image Viewer v3.6 malformed bmp image DoS Exploit Credit : suN8Hclf DaRk-CodeRs Group, [email protected] Download: : http://www.FastStone.org Greetz : Luigi Auriemma, 0in, cOndemned, e.wiZz!, Gynvael Coldwind, Katharsis, all from dark-coder...

FastStone Image Viewer 3.6 - .BMP Image Crash

FastStone Image Viewer 3.6 - .BMP Image Crash Name : FastStone Image Viewer v3.6 malformed bmp image DoS Exploit Credit : suN8Hclf DaRk-CodeRs Group, [email protected] Download: : http://www.FastStone.org Greetz : Luigi Auriemma, 0in, cOndemned, e.wiZz!, Gynvael Coldwind, Katharsis, all from...

FastStone Image Viewer 3.6 - '.BMP' Image Crash

Name : FastStone Image Viewer v3.6 malformed bmp image DoS Exploit Credit : suN8Hclf DaRk-CodeRs Group, [email protected] Download: : http://www.FastStone.org Greetz : Luigi Auriemma, 0in, cOndemned, e.wiZz!, Gynvael Coldwind, Katharsis, all from dark-coders and others; PoC:...

多个产品BMP拒绝服务漏洞

ACDSee, IrfranView和FastStone image viewer是图片管理处理程序。 ACDSee, IrfranView和FastStone image viewer处理畸形BMP文件存在问题，远程攻击者可以利用漏洞对应用程序进行拒绝服务攻击。 FastStone Image Viewer 2.9 目前没有解决方案提供： http://www.irfanview.com/ http://www.acdsee.com...

Integer overflow

Integer overflow in FastStone Image Viewer 2.9 allows context-dependent attackers to cause a denial of service and possibly execute arbitrary code via a crafted BMP image, as demonstrated by wh3intof.bmp and wh4intof.bmp...

CVE-2007-1942

Integer overflow in FastStone Image Viewer 2.9 allows context-dependent attackers to cause a denial of service and possibly execute arbitrary code via a crafted BMP image, as demonstrated by wh3intof.bmp and wh4intof.bmp...

CVE-2007-1942

Integer overflow in FastStone Image Viewer 2.9 allows context-dependent attackers to cause a denial of service and possibly execute arbitrary code via a crafted BMP image, as demonstrated by wh3intof.bmp and wh4intof.bmp...

CVE-2007-1942

FastStone Image Viewer 2.9 is affected by CVE-2007-1942 due to an integer overflow while processing BMP images. The vulnerability allows a context‑dependent attacker to cause a denial of service and potentially execute arbitrary code, as demonstrated by crafted BMPs wh3intof.bmp and wh4intof.bmp....

Several Windows image viewers vulnerabilities

I made a small research covering security of several Windows offline image viewers. Although, when discussing security of image viewing software, web browsers are usually implied, since they will be on the 'front lines' in the unsafe environment such as the Internet, this research lists several...

FastStone Image Viewer 2.9/3.6 - '.bmp' Image Handling Memory Corruption

// source: https://www.securityfocus.com/bid/23312/info FastStone Image Viewer is prone to multiple denial-of-service vulnerabilities because the application fails to properly handle malformed BMP image files. Successfully exploiting these issues allows attackers to crash the affected application...

Stack overflow

Stack-based buffer overflow in FastStone Image Viewer 2.8 allows user-assisted remote attackers to execute arbitrary code via a crafted JPG image...